commit bb0269b7284618c199e885607ceaf6f81d0ca00c
Author: Jon Staab <shtaab@gmail.com>
Date:   Tue Sep 23 15:43:05 2025 -0700

    Add readme, first commit

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..2e63c2a
--- /dev/null
+++ b/README.md
@@ -0,0 +1,82 @@
+# Costasiella
+
+This is a multi-tenant relay based on [Khatru](https://gitworkshop.dev/fiatjaf.com/nostrlib/tree/master/khatru) which implements a range of access controls. It's designed to be used with [Flotilla](https://flotilla.social) as a community relay (complete with NIP 29 support), but it can also be used outside of a community context.
+
+## Architecture
+
+A single Costasiella instance can run any number of "virtual" relays. The `config` directory can contain any number of configuration files, each of which represents a single virtual relay.
+
+## Configuration
+
+Configuration files are written using [toml](https://toml.io). The name of the configuration file should be the hostname the relay serves, for example `relay.example.com`. Config files contain the following sections:
+
+### `[self]`
+
+Contains information for populating the relay's `nip11` document.
+
+Required:
+
+- `secret` - the nostr secret key of the relay. Will be used to populate the relay's NIP 11 `self` field and sign generated events.
+
+Optional:
+
+- `name` - the name of your relay.
+- `icon` - an icon for your relay.
+- `pubkey` - the public key of the relay owner. Does not affect access controls.
+- `description` - your relay's description.
+
+### `[groups]`
+
+Configures NIP 29 support.
+
+- `enabled` - whether NIP 29 is enabled.
+- `auto_join` - whether relay members can join `open` groups without approval. Defaults to `true`.
+- `auto_leave` - whether relay members can leave groups without approval. Defaults to `true`.
+
+### `[roles]`
+
+Defines roles that can be assigned to different users and attendant privileges. Each role is defined by a `[roles.{role_name}]` header and has the following options:
+
+- `pubkey` - a list of nostr pubkeys this role is assigned to.
+- `nip86_methods` - a list of [NIP 86](https://github.com/nostr-protocol/nips/blob/master/86.md) relay management methods enabled for this role. Defaults to `[]`.
+- `can_invite` - a boolean indicating whether this role can invite new members to the relay by requesting a `kind 28935` claim. Defaults to `false`. See [access requests](https://github.com/nostr-protocol/nips/pull/1079) for more details.
+
+A special `[roles.member]` heading may be used to configure policies for all relay users (that is, pubkeys assigned to other roles, or who have redeemed an invite code).
+
+### `[data]`
+
+Contains information related to data persistence.
+
+- `sqlite` is the location of the sqlite database file. Defaults to `./data/{my-relay}.db`.
+- `media` is the name of the directory for storing blossom files. Defaults to `./media/{my-relay}`.
+
+### Example
+
+The below config file might be saved as `./config/my-relay.example.com` in order to route requests from `wss://my-relay.example.com` to this virtual relay.
+
+```toml
+[self]
+
+name = "My relay"
+secret = "ce30b1831a4551f4cb7a984033c34ab96d8cf56ff50df9d0c27d9fa5422f2278"
+
+[roles]
+
+[roles.member]
+
+can_invite = true
+
+[roles.admin]
+
+nip86_methods = ["supportedmethods", "banpubkey", "allowpubkey"]
+pubkeys = ["d9254d9898fd4728f7e2b32b87520221a50f6b8b97d935d7da2de8923988aa6d"]
+
+[groups]
+
+enabled = true
+auto_join = false
+```
+
+## Development
+
+Run `go run .` to run the project and `go build .` to build it. Be sure to run `gofmt -s -w .` before committing.